CVE-2025-69766 in AX3

الملخص

بحسب MITRE • 21/01/2026

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: MITRE
• حجز: 09/01/2026
• إفشاء: 21/01/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-342219
• CPE: جاهز
• CWE: CWE-121 (مؤكد)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00586
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Pharma, Energy, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-69766
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-69766
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-69766/